CVE-2024-7113

Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server

State: Published
Severity: 8.7 High
Published: Aug 13, 2024
Updated: Aug 15, 2024
Reserved: Jul 25, 2024

Description

If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	icscert

Weaknesses

CWE-770 Allocation of Resources Without Limits or Throttling

Affected Products

Product	Versions
SuiteLink ServerAVEVA	3.7.0 and earlierAffected
HistorianAVEVA	2023 R2 P01 and earlierAffected
InTouchAVEVA	2023 R2 P01 and earlierAffected
Application ServerAVEVA	2023 R2 P01 and earlierAffected
Communication Drivers PackAVEVA	2023 R2 and earlierAffected
Batch ManagementAVEVA	2023 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-01government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.